Commit Graph

225 Commits

Author SHA1 Message Date
Michal Čihař
8781e81c5e Move some messages to places where they belong.
This is bascially just test that everything works as expected, much more
messages should follow.
2010-03-11 23:58:38 +01:00
Marc Delisle
819324ede6 remove author names, as discussed at the 2010 developer meeting and according to the book Producing Open Source Software 2010-03-06 18:04:17 +00:00
Marc Delisle
5d96387808 bug #2961609 Potential information disclosure at login page 2010-03-04 13:00:35 +00:00
Marc Delisle
4ad6f11561 patch #2948421 HTTP Basic auth realm name 2010-02-24 16:48:52 +00:00
Michal Čihař
ecc4913a8c Reenable bookmarking code.
Just disable it for webkit based browsers, because they do not allow to
update any part of location without reload.

bug#2937481
2010-01-25 11:50:48 +00:00
Michal Čihař
b6a7def809 Reloading also on login page. 2010-01-22 21:45:49 +00:00
Michal Čihař
bee928cb75 Fix indentation. 2010-01-21 15:29:35 +00:00
Michal Čihař
ebf948d840 Cleare session error message before login. 2010-01-21 15:24:35 +00:00
Michal Čihař
ac9d23f535 rfe #2936156 [auth] Signon authentication forwards error message through session data. 2010-01-21 15:22:34 +00:00
Michal Čihař
94c2f864ae [core] Remove config data from session as it brings chicken-egg problem.
Configuration data stores PmaAbsoluteUri, which should be accessible
before initiating session. Otherwise there is no way to make
PmaAbsoluteUri work. PmaAbsoluteUri is needed at least for reverse
proxy setups, for example http webserver running behind https proxy.
2010-01-21 11:18:18 +00:00
Marc Delisle
e0579f1b9e bug #2905629 [auth] Blowfish secret is not hashed 2009-11-29 21:36:13 +00:00
Marc Delisle
6a803f65d3 [auth] Add custom port configuration in signon 2009-10-10 11:33:03 +00:00
Herman van Rink
9df074aad3 patch #2665440 Detect mcrypt initialization failure 2009-05-07 07:56:13 +00:00
Marc Delisle
2647ce6a5e patch #1863739 [auth] cache control missing (PHP-CGI), thanks to stmfd 2009-04-12 12:19:08 +00:00
Michal Čihař
8e607841f9 rfe #2127983 Readd documentation link, it does not protect against anything. 2009-03-03 13:30:49 +00:00
Michal Čihař
a09b9c2bb2 rfe #2123386 Added option to disable mcrypt warning. 2009-03-03 11:07:04 +00:00
Marc Delisle
4b67c7483f [auth] New setting AllowNoPassword (supercedes AllowNoPasswordRoot) that applies to all accounts (even the anonymous user) 2009-03-02 16:19:36 +00:00
Marc Delisle
842ed504d2 bug #2414056 [auth] AllowNoPasswordRoot error message is too vague 2009-02-10 18:15:18 +00:00
Marc Delisle
398feb40fd patch #2407785 [cleanup] ereg*() deprecated in PHP 5.3 2008-12-14 13:58:06 +00:00
Michal Čihař
610cc27c57 Some more phpdoc fixes (adding packages, ignoring some symbols,...). 2008-11-24 09:31:30 +00:00
Michal Čihař
5d010348da Add phpdoc package header to some files. 2008-11-24 09:14:31 +00:00
Michal Čihař
4152e2271c Define for swekey defaults. 2008-11-10 11:19:03 +00:00
Marc Delisle
19f448af24 swekey patch 7 2008-10-08 16:56:55 +00:00
Marc Delisle
2fae2ca8f9 avoid error Call to a member function getThemeUniqueValue() on a non-object 2008-10-04 15:06:00 +00:00
Marc Delisle
65e48911de bug #2136986 [auth] Cannot create database after session timeout 2008-10-04 14:43:36 +00:00
Marc Delisle
8ac47fad78 put back lost code, thanks to Michal 2008-09-07 12:04:41 +00:00
Marc Delisle
930ee57a1c latest Swekey fixes 2008-09-06 12:41:34 +00:00
Michal Čihař
5fe66c5891 Cleanup temporary variables. 2008-09-03 15:34:30 +00:00
Michal Čihař
432487b99d rfe #1778908 [auth] arbitrary server auth can now also accept port 2008-09-03 15:11:03 +00:00
Michal Čihař
92295fc3ec Dead code. 2008-09-03 14:25:26 +00:00
Michal Čihař
e170d51522 Whitespace. 2008-09-03 14:07:30 +00:00
Michal Čihař
85cdc82d4d Cookie auth now autogenerates blowfish_secret, but it has some limitations and you still should set it in config file 2008-09-03 13:27:43 +00:00
Michal Čihař
21d72b9d99 Some more corrections. 2008-09-03 13:00:48 +00:00
Michal Čihař
7199c3123c A little bit of coding style. 2008-09-03 12:59:52 +00:00
Michal Čihař
9a682e2054 Point to new setup script in all places, drop old one. 2008-08-29 18:07:50 +00:00
Marc Delisle
1bd7ec70e2 bug #2046883 [core] Notices about deprecated dl() (so stop using it) 2008-08-16 14:06:27 +00:00
Marc Delisle
524823353d other version numbers to avoid displaying 2008-08-08 16:15:16 +00:00
Marc Delisle
8f5bc064cb Swekey patch #4 by Luc Andre 2008-08-05 17:28:28 +00:00
Marc Delisle
2f81b47624 bug #2031221 [auth] Links to version number on login screen 2008-08-01 19:00:36 +00:00
Marc Delisle
6a707344eb remove version info on cookie login screen 2008-07-15 14:14:09 +00:00
Marc Delisle
544831fda7 patch #2007196, Typos in comments, thanks to knittl - knittl 2008-07-01 19:21:28 +00:00
Marc Delisle
afbb2a9dc2 protection against XSS when register_globals is on and .htaccess has no effect 2008-06-21 15:01:27 +00:00
Marc Delisle
fdff4d6b71 patch #1972915 version 3 + Luc modifs + Marc modifs (link in contrib/swekey.sample.conf 2008-06-17 17:20:53 +00:00
Marc Delisle
f5a76baa0c [auth] support Feebee hardware authentication 2008-06-12 12:36:10 +00:00
Marc Delisle
3c01ca4b4e typos 2008-04-05 12:35:24 +00:00
Marc Delisle
cb692f0267 patch #1930057 [auth] colon in password prevents HTTP login on CGI/IIS 2008-04-03 12:42:33 +00:00
Marc Delisle
2d1c29d3f8 bug #1813508 [login] Missing parameter: field after re-login 2007-12-18 18:13:24 +00:00
Sebastian Mendel
c7cf86e3cf bug #1764182 [cookies] Suhosin cookie encryption breaks phpMyAdmin 2007-12-18 08:02:41 +00:00
Marc Delisle
e57fcde535 improve formatting of strAccessDeniedExplanation 2007-12-07 17:57:45 +00:00
Marc Delisle
d3a46e209c patch #1821154, HTTP authentication: fix auth working with php/mod_fastcgi 2007-11-01 20:59:48 +00:00